Tendio is built on Australian cloud infrastructure and processes all client data within Australia. This is not optional for us. It is a design requirement driven by the Privacy Act 1988 and the nature of the data aged care and home care providers entrust to their systems.
All client records, service data, billing information, and operational logs are stored in Microsoft Azure's Australia East data centre. Data does not leave this region.
All AI processing runs through AWS Bedrock in the Sydney region. Client data sent to the AI model does not leave Australia. This is a deliberate architectural choice, not a default setting.
Outbound SMS and voice call routing uses a US-based communications provider. Message content is transient. No client records, care data, or personal information are stored with this provider.
Tendio acts as a data processor. Your organisation remains the data controller. Our Master Services Agreement sets out the data handling obligations for both parties, including your obligations under the Privacy Act 1988 when deploying AI-assisted services to clients.
| Provider | Purpose | Data location |
|---|---|---|
| Microsoft Azure | Application hosting, database, infrastructure | Australia East |
| Amazon Web Services | AI model processing via AWS Bedrock | Sydney (ap-southeast-2) |
| Communications provider | Outbound SMS and voice call routing | United States (transient comms only) |
Sub-processors are reviewed when new solutions are added. Clients are notified of any material changes to this list under the terms of the Master Services Agreement.
Aged care and home care providers in Australia operate under the Privacy Act 1988 (Cth) and are bound by the Australian Privacy Principles. APP 8 specifically governs cross-border disclosure of personal information. Tendio's infrastructure is designed so that client records and care data are not disclosed to overseas recipients, keeping you on the right side of APP 8 by default.
Our AI processing runs through AWS Bedrock in the Sydney region, which means the data you send to the AI model is processed within Australia. This is materially different from using overseas AI services directly, where client data would be processed by servers in the United States or Europe.
The one area to note is communications. Outbound SMS and voice routing uses a US-based third-party provider. The content of these communications is transient and not stored by Tendio. Your privacy policy and client communications should reflect that you use third-party services for automated messaging where relevant.
Our Master Services Agreement and Privacy Policy are available on request and set out the full data handling terms governing your engagement with Tendio.
We are happy to answer procurement questions, provide documentation, or walk through our data handling practices with your compliance team.
Email hello@tendio.com.au or book a discovery session